Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8269033

[BACKOUT] JDK-8196415 Disable SHA-1 Signed JARs

XMLWordPrintable

    • Icon: CSR CSR
    • Resolution: Approved
    • Icon: P2 P2
    • 17
    • security-libs
    • None
    • behavioral
    • minimal
    • System or security property
    • JDK

      Summary

      Revert the JDK changes introduced via CSR JDK-8264362 for JDK 17.

      Problem

      Performance issues have been reported with the patch created for JDK-8196415 (and approved via CSR JDK-8264362). The fix has already been previously reverted from the JDK Update releases. We need more time to address the performance issues, so we will also revert the fix from JDK 17.

      Solution

      Perform an anti-delta of the patch from JDK-8196415.

      Specification

      Remove (revert) the "SHA1 jdkCA & usage SignedJAR & denyAfter 2019-01-01" change from the jdk.certpath.disabledAlgorithms Security property

      Remove (revert) the "SHA1 jdkCA & denyAfter 2019-01-01" change from the jdk.jar.disabledAlgorithms Security property.

            mullan Sean Mullan
            pkumaraswamy Prajwal Kumaraswamy
            Xuelei Fan
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: